{"id":167905,"date":"2026-04-08T11:11:59","date_gmt":"2026-04-08T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya"},"modified":"2026-04-08T11:11:59","modified_gmt":"2026-04-08T09:11:59","slug":"uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-vo-flatpak-pozvolyayushhaya-vypolnit-kod-vne-izolirovannogo-okruzheniya","title":{"rendered":"Dob\u00ebsia n\u00eb Flatpak, e cila lejon ekzekutimin e kodit jasht\u00eb mjedisit t\u00eb izoluar.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb nj\u00eb version korrigjues t\u00eb publikuar disa or\u00eb m\u00eb par\u00eb p\u00ebr sistemin e pakove t\u00eb autonomuara Flatpak 1.16.4, si dhe n\u00eb versionin eksperimental 1.17.4, \u00ebsht\u00eb riparuar nj\u00eb dob\u00ebsi (CVE-2026-34078) q\u00eb lejon nj\u00eb aplikacion t\u00eb d\u00ebmsh\u00ebm ose t\u00eb komprometuar n\u00eb formatin flatpak t\u00eb anashkaloj\u00eb modalitetin e vendosur t\u00eb izolimit sandbox, t\u00eb qasje n\u00eb skedar\u00ebt n\u00eb sistemin kryesor dhe t\u00eb ekzekutoj\u00eb kod t\u00eb rast\u00ebsish\u00ebm jasht\u00eb modit t\u00eb izolimit. Problem\u00ebs iu atribua nj\u00eb nivel kritik rreziku (9.3 nga 10). <\/p>\n

Vulnerabiliteti \u00ebsht\u00eb i pranish\u00ebm n\u00eb sh\u00ebrbimin D-Bus flatpak-portal, i cili siguron nisjen e \"portaleve\", t\u00eb cilat p\u00ebrdoren p\u00ebr t\u00eb organizuar qasjen n\u00eb burimet e ambientit kryesor nga aplikacione t\u00eb izoluara. Problemi shkaktohet nga fakti q\u00eb sh\u00ebrbimi flatpak-portal lejon aplikacionin t\u00eb specifikoj\u00eb n\u00eb opsionin sandbox-expose rrug\u00ebt e skedar\u00ebve, t\u00eb cilat p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb kontrolleve t\u00eb duhura mund t\u00eb jen\u00eb lidhje simbolike q\u00eb tregojn\u00eb n\u00eb pjes\u00eb arbitrare t\u00eb sistemit t\u00eb skedar\u00ebve. <\/p>\n

Para se t\u00eb montoj\u00eb, sh\u00ebrbimi zbulohet lidhjen simbolike dhe monton n\u00eb ambientin sandbox rrug\u00ebn n\u00eb t\u00eb cil\u00ebn ajo tregon, duke lejuar k\u00ebshtu anashkalimin e izolimit dhe qasjen p\u00ebr lexim dhe shkruarje n\u00eb skedar\u00ebt e ambientit host. P\u00ebr t\u00eb organizuar ekzekutimin e kodit t\u00eb tij n\u00eb sistem, p\u00ebr shembull, mund t\u00eb shtoj\u00eb nj\u00eb skenar q\u00eb nis automatikisht, si \"~\/ .bashrc\" ose \"~\/ .profile\", ose t\u00eb modifikoj\u00eb skedarin \"~\/ .ssh\/ authorized_keys\" me \u00e7el\u00ebsat SSH. <\/p>\n

Statusi i eliminimit t\u00eb vulnerabilitetit n\u00eb shp\u00ebrndarjet mund t\u00eb vler\u00ebsohet n\u00eb k\u00ebto faqe (n\u00ebse faqja nuk \u00ebsht\u00eb e aksesueshme, at\u00ebher\u00eb zhvilluesit e shp\u00ebrndarjes nuk kan\u00eb filluar akoma t\u00eb shqyrtojn\u00eb problemin): Debian, Ubuntu, SUSE, RHEL, Gentoo, Arch, Fedora. Si nj\u00eb m\u00ebnyr\u00eb alternative p\u00ebr mbrojtje mund t\u00eb shky\u00e7ni sh\u00ebrbimin flatpak-portal: sudo systemctl --global mask flatpak-portal.service && systemctl --user stop flatpak-portal.service <\/p>\n

P\u00ebrve\u00e7 dob\u00ebsis\u00eb kritike, n\u00eb versionin e ri jan\u00eb zgjidhur edhe tre probleme t\u00eb tjera me sigurin\u00eb: <\/p>\n